450d1ccda6091850a346870d183a287c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

450d1ccda6091850a346870d183a287c_JaffaCakes118
Size

280KB
MD5

450d1ccda6091850a346870d183a287c
SHA1

d801027c90e43c7007c5c842815767485e2855c0
SHA256

b87baff94a5d170d52abca3d1e785ed814df0ced3e0cab572bddc9da9babdc51
SHA512

dfb8ec2338270aec51f8fad9ca2e8f0cd7886fe25c84bddf4a6ce5b772c0eabf48e81c6a49dcba50e86eb4ffe1a698fa22ca9b84b844c658f4dfa1dca8ab491a
SSDEEP

6144:LlyoAxyoUcrwA+fmeJLvMCq+y6b7zrPfr34ZEC/cRTw9sj:LcCvccA+fmetrn3bD3/q9k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
450d1ccda6091850a346870d183a287c_JaffaCakes118

Files

450d1ccda6091850a346870d183a287c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

32236305efeef11feb84077a24a56c0e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathCombineA

user32

wsprintfA
ShowWindow
MessageBoxW
MessageBoxA
IsIconic
GetWindowThreadProcessId
GetWindowLongA
GetUserObjectInformationW
GetSystemMetrics
GetProcessWindowStation
GetDesktopWindow
EnumWindows
CloseWindow

kernel32

GetVersionExA
lstrcmpiA
CloseHandle
CompareFileTime
CompareStringA
CompareStringW
CreateDirectoryA
CreateEventA
CreateFileA
CreateFileW
CreateThread
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FlushConsoleInputBuffer
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetOverlappedResult
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTickCount
GetTimeZoneInformation
GetUserDefaultLangID
GetVersion
WriteFile
GetVolumeInformationA
GetWindowsDirectoryA
GlobalMemoryStatus
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedExchange
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
OpenEventA
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadConsoleInputA
ReadFile
RemoveDirectoryA
ResetEvent
RtlUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetEndOfFile
SetEnvironmentVariableA
SetEvent
SetFileAttributesA
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
Sleep
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte

advapi32

RegQueryValueExA
DeregisterEventSource
SetSecurityDescriptorDacl
ReportEventA
RegisterEventSourceA
RegSetValueExA
RegSetKeySecurity
AllocateAndInitializeSid
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
InitializeSecurityDescriptor
FreeSid

ole32

CoCreateGuid

Exports

Exports

BindTexture
D3D9Begin
D3D9RegisterVertexBuffer
D3D9ResourceGetMappedPitch
D3D9ResourceGetMappedSize
D3D9ResourceGetSurfaceDimensions
D3D9ResourceSetMapFlags
EnumDeviceReset
EnumFlashSettingNext
EnumImageItemNext
EventQuery
EventSynchronize
GLSetBufferObjectMapFlags
GetChannelDesc
GetDevSplineArrayEx
GetDllsVersion
GetThinImageSize
GetVMSInfo
Memcpy2DFromArray
ThreadExit
WaitForMedia

Sections

.text
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

32236305efeef11feb84077a24a56c0e

Headers

File Characteristics

Imports

shlwapi

user32

kernel32

advapi32

ole32

Exports

Exports

Sections

.text Size: 172KB - Virtual size: 172KB

.data Size: 96KB - Virtual size: 108KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 172KB - Virtual size: 172KB

.data
Size: 96KB - Virtual size: 108KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB